Michael Kroes
44378c9aa3
Merge branch 'postgrey-whitelist'
2019-07-16 16:20:38 +02:00
Michael Kroes
83880da906
Changed the postgrey update script to run daily, but check if the file is older than 28 days
2019-07-16 16:20:19 +02:00
Michael Kroes
22fb9fdd59
Merge branch 'postgrey-whitelist'
2019-07-16 13:49:12 +02:00
Michael Kroes
f0c8ca3b00
Add the --fail flag to curl when downloading the postgrey whitelist and redirect stdout and stderr to null
2019-07-16 13:48:41 +02:00
Michael Kroes
a7134d0974
Merge branch 'postgrey-whitelist'
2019-07-16 13:05:39 +02:00
Michael Kroes
5362155046
Use HTTPS for Postgrey whitelist and use correct silence flags for curl
2019-07-16 13:05:23 +02:00
Michael Kroes
a451c35151
Merge branch 'postgrey-whitelist'
2019-07-16 12:18:03 +02:00
Michael Kroes
a86a7f6dd5
Updated the Postgrey whitelist to a newer version, this will be auto updated once a month.
2019-07-16 12:14:03 +02:00
Michael Kroes
5b4d1cbf43
Merge remote-tracking branch 'upstream/master'
2019-07-16 12:10:15 +02:00
yodax
a9ffacb738
Merge remote-tracking branch 'upstream/master'
2019-01-10 04:22:05 +01:00
yodax
48ed564978
Added a dynamicdns proxy that accepts GET requests and transforms them into PUT requests
2019-01-08 06:53:48 +01:00
Michael Kroes
6eb9055275
Upgrade NextCloud to 13.06 ( #1436 )
2018-10-09 07:09:54 -04:00
Michael Kroes
a0e603a3c6
Change z-push to use the git repository instead of the tar ball ( #1305 )
2017-12-23 17:51:18 -05:00
Michael Kroes
e5448405ae
add php7.0-mbstring to webmail.sh ( #1268 )
2017-10-15 07:53:01 -04:00
Michael Kroes
a52c56e571
only set the CN field when generating initial CSR to prevent issues with the php7 ppa version of openssl ( #1223 )
...
OpenSSL 1.1.0f now validates the other subject fields and rejects the empty string (for the country?) because it isn't two characters.
2017-07-30 08:11:39 -04:00
Michael Kroes
78f2fe213e
Secondary name server could not be set ( #1209 )
2017-07-21 08:20:37 -04:00
Michael Kroes
a16855ecf0
Backup script should now stop php7.0-fpm instead of php5-fpm ( #1206 )
2017-07-17 09:45:40 -04:00
yodax
d773140502
Update to Nextcloud 12 using PHP7
...
* Install PHP7 via a PPA, enable unattended upgrades for the PPA, and switch all of our PHP configuration to the PHP7 install.
* Keep installing PHP5 for ownCloud/Nextcloud packages because we need it to possibly run transitional updates to ownCloud/Nextcloud versions less than 12. But replace PHP5 packages with PHP7 packages elsewhere.
* Update to Nextcloud 12 which requires PHP7, with a transitional upgrade to Nextcloud 11.0.3.
* Disable TLS cert validation by Roundcube when connecting to localhost IMAP and SMTP. Validation became the default in PHP7 but we don't necessarily have a (non-self-)signed certificate and it definitely isn't valid for the IP address 127.0.0.1.
Merges #1140
2017-07-14 06:48:22 -04:00
Michael Kroes
2c324d0bc9
web_domains should also normalize ipv6 addresses ( #1201 )
2017-07-13 07:16:12 -04:00
Michael Kroes
e49c99890b
fetch whole bootstrap - fixes missing icons in admin ( #1185 )
2017-05-31 07:36:17 -04:00
Michael Kroes
1d9f9ea617
Fix two typos in setup/owncloud.sh regarding the setting of the hostname ( #1172 )
2017-05-08 07:23:59 -04:00
Michael Kroes
fbb38c3881
Add changelog for custom dns CAA records ( #1173 )
2017-05-08 07:23:12 -04:00
Michael Kroes
d2b7204319
Add support for adding a custom "CAA" DNS record ( #1155 )
2017-04-30 08:58:00 -04:00
Michael Kroes
68ebca8a15
Update Z-Push to 2.3.6 ( #1166 )
2017-04-30 07:24:36 -04:00
Michael Kroes
416dbebf45
update z-push to 2.3.5 on the upstream repository z-push.org ( #1153 )
2017-04-17 07:42:44 -04:00
yodax
b66f12dd4c
Fix rsync backup. The path was not append properly
2017-04-17 07:25:47 -04:00
yodax
6e04eb490f
Add check to prevent division by zero during backup status
2017-04-17 07:25:47 -04:00
Michael Kroes
cd39c2b53f
Merge pull request #1151 from phol/master
...
Corrected typo in setup/dns.sh
2017-04-10 18:52:38 +02:00
Michael Kroes
a072730fb8
Wrap normalize_ip in try..except ( #1139 )
...
closes #1134
2017-04-03 16:53:53 -04:00
Michael Kroes
41601a592f
Improve error handling when doing update checks ( #1065 )
...
* Added an error message to handle exceptions when the setup script is trying to determine the latest Miab version
2017-01-15 10:35:33 -05:00
Michael Kroes
3af5e55035
Upgrade to ownCloud 9.1.2 ( #1010 )
...
* Update owncloud to 9.1.2
* Upgrade to ownCloud 9.1.2 from 9.1.1 would fail because the guid of 9.1.1 matched with the regex for the version of 8.x
2016-11-30 12:54:27 -05:00
Michael Kroes
c3605f6211
Check if update-manager release-upgrades configuration file is present before editing ( #996 )
2016-11-13 17:36:33 -05:00
yodax
3b78a8d9d6
If ufw isn't installed on the machine the status checks shouldn't fail
2016-11-12 09:25:34 -05:00
Michael Kroes
2b00478b8b
Check if apc is disabled during ownCloud setup, if so enable it ( #983 )
2016-10-24 07:59:34 -04:00
Michael Kroes
155bcfc654
Add ownCloud 9.1.1 to the changelog ( #984 )
2016-10-21 10:12:46 -04:00
Michael Kroes
2151d81453
update to ownCloud 9.1.1 (with intermediate upgrades) ( #894 )
...
[this is a squashed merge from-]
* Install owncoud 9.1 and provide an upgrade path from 8.2. This also disables memcached and goes with apc. The upgrade fails with memcached.
* Remove php apc setting
* Add dav migrations for each user
* Add some comments to the code
* When upgrading owncloud from 8.2.3 to 9.1.0 the backup of 8.2.3 was overwritten when going from 9.0 to 9.1
* Add upgrade path from 8.1.1. Only do an upgrade check if owncloud was previously installed.
* Stop php5-fpm before owncloud upgrade to prevent database locks
* Fix fail2ban tests for owncloud 9
* When upgrading owncloud copy the database to the user-data/owncloud-backup directory
* Remove not need unzip directives during owncloud extraction. Directory is removed beforehand so a normal extraction is fine
* Improve backup of owncloud installation and provide a post installation restore script. Update the owncloud version number to 9.1.1. Update the calendar and contacts apps to the latest versions
* Separate the ownCloud upgrades visually in the console output.
2016-10-18 06:04:13 -04:00
Michael Kroes
fd6226187a
lower memory requirements to 512MB, display a warning if system memory is below 768MB. ( #952 )
2016-10-15 15:41:25 -04:00
Michael Kroes
a658abc95f
Fix status checks for ufw when the system doesn't support iptables ( #961 )
2016-10-08 14:35:19 -04:00
yodax
da5497cd1c
Update changelog entries
2016-09-28 08:37:24 +02:00
Michael Kroes
a27ec68467
Merge pull request #951 from MariusBluem/remove-certificate-providers
...
Remove Certificate Providers / Fix #950
2016-09-28 08:33:11 +02:00
Michael Kroes
02feeafe6a
change bayes_file_mode to world writable (merges #931 )
...
fixes #534 , again, hopefully
2016-09-23 15:14:21 -04:00
Michael Kroes
9c8f2e75fc
allow i686 as a supported architecture
...
This is checked during preflight. See https://github.com/mail-in-a-box/mailinabox/issues/885 (#889 )
2016-07-29 09:07:16 -04:00
Michael Kroes
4e3cfead46
Add HSTS to the control panel headers ( #879 )
2016-07-29 09:01:40 -04:00
Michael Kroes
fb14e30feb
Remove owncloud log configuration from initial setup and only apply it during the configuration updates. This applies to both the timezone and the log format
2016-06-27 06:03:24 -04:00
Michael Kroes
d9ac321f25
Owncloud needs more time to detect blocks. It doesn't respond as fast as the other services. Also owncloud logs UTC (since latest update) even though the timezone is not UTC. Also to detect a block, we get a timeout instead of a refused)
2016-06-27 06:03:19 -04:00
Michael Kroes
bf5e9200f8
Update owncloud url to use webdav and increase http timeout
2016-06-27 06:03:14 -04:00
Michael Kroes
01fa8cf72c
add fail2ban jails for ownCloud, postfix submission, roundcube, and the Mail-in-a-Box management daemon
...
(tests squashed into this commit by josh)
2016-06-06 09:13:10 -04:00
Michael Kroes
736b3de221
Improve matching of ufw output. Reuse network service list. Improve messages
2016-04-07 16:03:28 +02:00
Michael Kroes
42f2e983e5
Merge branch 'master' into ufw_status_check
2016-04-07 15:13:59 +02:00
Michael Kroes
bc40134b7b
Remove comment about loopback interface
2016-04-07 10:55:20 +02:00
Michael Kroes
3649ba1ce9
Merge branch 'master' into hostname
2016-04-07 10:54:53 +02:00
Michael Kroes
c9f30e8059
Add status checks for ufw
2016-04-02 13:41:16 +02:00
Michael Kroes
3210ccdcac
Don't set the hostname on the loopback 127.0.1.1
2016-03-26 15:41:20 +01:00
Michael Kroes
c910a58f07
Set the hostname of the box during the setup
2016-03-26 14:15:28 +01:00
Michael Kroes
f292e8fc5b
Add generic login failed message
2016-03-26 14:06:43 +01:00
Michael Kroes
4d7229ccb0
Add documentation on why the notification was removed from the recidive jail
2016-03-26 13:37:33 +01:00
Michael Kroes
454a2b167b
Stop fail2ban recidive from sending emails, like all other jails
2016-03-26 09:04:51 +01:00
Michael Kroes
d7d8bda0a4
Instructions on how to create a web site for a domain weren't rendered. Users would miss the step about manually creating the directory to put files in there and wouldn't see anything happen
2016-03-25 13:37:55 +01:00
Michael Kroes
696bbe4e82
Add a swap file to the system if system memory is less than 2GB, 5GB of free disk space is available, and if no swap file yet exists
2016-03-23 17:07:04 -04:00
yodax
84f4509b48
Configure bayes_file_mode in spamassassin/local.cf
2016-03-20 05:55:58 +01:00
Michael Kroes
35a593af13
Improve preflight message
2016-03-14 07:14:09 +01:00
Michael Kroes
f69d6e9015
Add a preflight check for supported architecture
2016-03-14 07:00:33 +01:00
Michael Kroes
44705a32b7
Never allow admin panel to be inside a frame, use both modern and old headers. Also set no content sniffing
2016-03-13 18:40:02 +01:00
Michael Kroes
e343061cf4
Prevent clickjacking of management interface
2016-03-13 18:23:10 +01:00
Michael Kroes
33a9fb6aa2
Add a better message
2016-03-11 15:14:37 +01:00
Michael Kroes
0bc5d20e8f
Add check for user overrides to wgetrc
2016-03-11 15:10:31 +01:00
Michael Kroes
b71ad85e9f
Restore an empty line
2016-02-26 09:51:22 +01:00
Michael Kroes
86d3e9da86
Merge branch 'master' into reboot
2016-02-26 09:49:03 +01:00
yodax
f53d3bc390
Merge branch 'master' into dynamicpool
2016-02-26 09:20:23 +01:00
Michael Kroes
8ea2f5a766
Allow a server to be rebooted when a reboot is required
2016-02-25 21:56:27 +01:00
yodax
6c1357e16c
Merge branch 'master' into dynamicpool
2016-02-23 17:01:13 +01:00
yodax
721730f0e8
Create a temporary multiprocessing pool
2016-02-23 06:32:01 +01:00
yodax
7a191e67b8
Add a changelog entry
2016-02-22 21:01:33 +01:00
yodax
a2e6e81697
Add a changelog entry
2016-02-22 19:14:46 +01:00
yodax
1b24e2cbaf
Reduce percentages for required memory checks
2016-02-22 17:49:19 +01:00
yodax
0843159fb4
Reduce number of processes in the pool to 5
2016-02-22 17:38:30 +01:00
Michael Kroes
a7e60af93f
Update comments
2016-02-21 12:47:09 -05:00
Michael Kroes
42f879687f
Add check to preflight for exec on tmp
2016-02-21 12:43:04 -05:00
yodax
057903a303
Allow files in /home/user-data/mail/mailboxes
2016-02-21 13:49:07 +01:00
yodax
b8e99c30a2
When previous panel was login, move to system_status
2016-02-20 18:42:28 +01:00
yodax
c28065cc56
Add log rotation to z-push
2015-11-17 09:27:05 -05:00
yodax
280de022cb
Change order in which service stop
2015-11-17 05:22:42 -05:00
yodax
fa1cad7fb2
During the backup you will get login failures which will confuse iOS, so it is better to stop php-fpm as well
2015-11-17 02:57:14 -05:00